Open kplimack opened 7 years ago
robbkidd
commented
7 years ago A couple questions:
fieri from the list of features enabled in the features attribute.https://supermarket.myOrg.com signed by a trusted Certificate Authority?
kplimack
commented
7 years ago @robbkidd
I think i want it. foodcritic output isnt super helpful since my cookbooks go through CI to make their way to the supermarket and they must pass foodcritic, etc there. But id like to enable it and see for myself, or if any additional metrics make their way in.
my chef server and supermarket are sharing the same wildcard cert from an external CA, so i "assume" that it should work.
nellshamrell
commented
7 years ago @kplimack does your Supermarket instance run behind a load balancer? If it does, does SSL termination happen at the load balancer, or on the instance that Supermarket is running on?
kplimack
commented
7 years ago No. It's accessible without an LB
nellshamrell
commented
7 years ago Could you enter the rails console on the instance you are running Supermarket on? You can do this by SSH'ing to the instance and running $ sudo -u supermarket supermarket-ctl console
Could you let me know what it returns when you run this from within the console?
ENV['FIERI_URL']@nellshamrell looks like i also need to track down the source of all this spam about port 7777, too.
ENV['FIERI_URL']E, [2017-03-07T20:44:11.903797 #2568] ERROR -- : Failed to open TCP connection to localhost:7777 (Connection refused - connect(2) for "localhost" port 7777)
=> "http://localhost:13000/fieri/jobs"
irb(main):002:0> E, [2017-03-07T20:44:12.905355 #2568] ERROR -- : Failed to open TCP connection to localhost:7777 (Connection refused - connect(2) for "localhost" port 7777)
E, [2017-03-07T20:44:13.906924 #2568] ERROR -- : Failed to open TCP connection to localhost:7777 (Connection refused - connect(2) for "localhost" port 7777)
E, [2017-03-07T20:44:14.908478 #2568] ERROR -- : Failed to open TCP connection to localhost:7777 (Connection refused - connect(2) for "localhost" port 7777)
E, [2017-03-07T20:44:15.909958 #2568] ERROR -- : Failed to open TCP connection to localhost:7777 (Connection refused - connect(2) for "localhost" port 7777)
E, [2017-03-07T20:44:16.911600 #2568] ERROR -- : Failed to open TCP connection to localhost:7777 (Connection refused - connect(2) for "localhost" port 7777)
E, [2017-03-07T20:44:17.913218 #2568] ERROR -- : Failed to open TCP connection to localhost:7777 (Connection refused - connect(2) for "localhost" port 7777)
E, [2017-03-07T20:44:18.914706 #2568] ERROR -- : Failed to open TCP connection to localhost:7777 (Connection refused - connect(2) for "localhost" port 7777)
E, [2017-03-07T20:44:19.916183 #2568] ERROR -- : Failed to open TCP connection to localhost:7777 (Connection refused - connect(2) for "localhost" port 7777)
[jplimack@supermarket]~% curl -I http://localhost:13000/fieri/status
HTTP/1.1 200 OK@kplimack Failed to open TCP connection to localhost:7777 is a byproduct of adding a monitoring agent to Supermarket. We have an issue open on that agent and will make a new release when the agent is updated with a fix.
nellshamrell
commented
7 years ago Alright, that FIERI_URL looks correct, and ty for demonstrating that you can curl it successfully. Taking another look at the stack trace.
nellshamrell
commented
7 years ago What do you have for ENV['FIERI_SUPERMARKET_ENDPOINT']? After taking another look at your stack trace, that seems to be what it is choking on.
kplimack
commented
7 years ago @nellshamrell
"https://localhost:13000"
robbkidd
commented
7 years ago That's the default set in the omnibus install for FIERI_SUPERMARKET_ENDPOINT and I think it that may be the wrong default to set. The Rails app service running on localhost:13000 does not do SSL; SSL is handled higher up in the stack by nginx.
@kplimack If you were to override the fieri_supermarket_endpoint attribute—e.g. the same way you override fqdn—to set it to http://localhost:13000, I suspect the SSL error would stop and fieri job results would get posted successfully. If you try that, let us know if it succeeds (or doesn't). We'll get a fix in for that.
kplimack
commented
7 years ago @robbkidd thanks. I'll try that tomorrow. Would you happen to have any docs on integrating supermarket into a ci/cd pipeline?
kplimack
commented
7 years ago @robbkidd That seems to have done the trick!
I would love it if you had any docs on CI/CD workflows using a supermarket. In a chef-zero environment, it makes total sense, but in a client/server setup its role is not as well defined.
supermarket-2.9.7-1.el6.x86_64